Member Avatar for Ghost

Hi Everybody,

I was wondering if there was a way to take a string in a java project and put it in the username field (like the field on ) of another program. I think you may have to access another class somewhere else.Just so you know... I'm doing this on my own free will. It's not for a class.

Ian

PS: I was wondering if you could also give me the code and not just an explanation

  • 4 Contributors
  • 9 Replies
  • 255 Views
  • 6 Days Discussion Span
  • Latest Post Latest Post by paradox814

Dani AI

Generated

Short summary for and everyone who replied: automating a login from Java is possible, but the right tool depends on how the site behaves. Simple HTML forms can be handled at the HTTP level; Java sites that use heavy JavaScript, single‑page apps, CSRF tokens, CAPTCHAs or advanced bot protection generally require a real browser automation approach. Some earlier suggestions in this thread pointed in the right directions but missed important reliability, privacy and legal caveats — see the notes below.

A compact, robust first approach is to drive HTTP requests from Java (Java 11+ HttpClient or Apache HttpClient). Build a client that preserves cookies, follow redirects, fetches any CSRF token from the login page, then POST the form fields with the token in the right place. Example (very small skeleton):

HttpClient client = HttpClient.newBuilder()
    .followRedirects(HttpClient.Redirect.NORMAL)
    .cookieHandler(new CookieManager())
    .build();

HttpRequest req = HttpRequest.newBuilder()
    .uri(URI.create("https://example.com/login"))
    .header("Content-Type","application/x-www-form-urlencoded")
    .POST(BodyPublishers.ofString("username=me&password=secret&csrf=XYZ"))
    .build();

HttpResponse<String> resp = client.send(req, BodyHandlers.ofString());

This is reliable when the login is a standard form. (docs.oracle.com)

When the page builds or validates the login in JavaScript, use a headful/headless browser (Selenium WebDriver from Java). That lets you findElement(...).sendKeys(...), click, wait for navigation, and capture session cookies — but sites and CAPTCHAs can detect automation (for example via navigator.webdriver) and will block or present challenges. Be prepared for extra work (anti-bot fingerprints, reCAPTCHA, 2FA). (selenium.dev)

Finally, check rules and risk. Embedding credentials in URLs or bypassing protections is fragile, often deprecated and may violate site terms or laws; get permission or use official APIs/OAuth when available. For legal context and why respect for site restrictions matters, see the discussion linked below. (datatracker.ietf.org)

Next steps checklist: pick the HTTP-vs-browser approach, inspect the network tab to find tokens/endpoints, implement cookie + token handling, add retry/logging, and only attempt automation where you have permission.

Recommended Answers

All 9 Replies

Member Avatar for Ghost

i think you misunderstood me. I want my porgram to automatically log me into a website's secure server (ie: i want my program to enter the string username into the username field on gmail.com and enter the string password in the password field on gmail.com.

Thanks.

Sorry for being unclear. I hope I was more clear this time,
Ian

Member Avatar for server_crash

I doubt it. I'm sure that they got protection against something like that, because otherwise there would already be hundreds of password cracking programs out there that constantly tried differen't combinations of password. Maybe I'm wrong, but I still don't think it's possible.

Member Avatar for paradox814

hmmm... well as long as you could post the data to there website, I have absolutely no clue as to how to even attempt this. I don't know if you could do this with gmail since there website is so javascript intensive.

But just visit gmail and search for all the form parameters, not just the username and password one but all the hidden fields you will see them in the source code
<input type="hidden" name="something" value="something-else">
and find out where all this information is being posted to under the action parameter

Member Avatar for ultimate_fusion

dont want to sound stupid but if you can just do keystrokes instead of trying to put the data in the fields e.g
yahoo you have to tab a couple of times and you get to the email username.
then just keystroke that in then tab and them password.
I dont know if this is possible but another way to get round the problem.

i hope this makes sense.

UF

Member Avatar for Ghost

UF,

that makes sense, but i don't think it's possible. If anybody does know how to do that, please tell me.

Thanx
C++

Member Avatar for paradox814

some servers like that allow for an highly unsecure method which is unsecure it works with (i think) this works only for .htaccess file type login (I'm not sure what the equivalent is for ms windows)

http://username:/folder-name/

this worked on the site you metioned but the problem with this method is that it may leave your username/password saved in the address bar of your web browser

it works on the website you provided, but being as that I don't have a valid password to log in, it won't work for me, but here is the example:

http://username:/Password/password.jsp?username=brector&filename=WEBPROTECT-job.htm

Member Avatar for Ghost

thank you, but both links dont work. The username + password 4 that page is:
USERNAME: brector
PASSWORD: griffin

Member Avatar for paradox814

i tried it and it worked just fine, let me give you the link, but this time i substituted the username/password in there

http://brector:/Password/password.jsp?username=brector&filename=WEBPROTECT-job.htm

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.